create auth manager with access by role.